IBM Security Privileged Identity Manager Virtual Appliance

Version 2.0

Quick Start Guide

This guide describes a quick and easy way to install the product.

National Language Version: To obtain the Quick Start Guide in other languages, access the PDF files on the Quick Start DVD.

Product overview

IBM Security Privileged Identity Manager helps organizations manage, automate, and track the use of shared privileged identities. The IBM Security Privileged Identity Manager virtual appliance is a network appliance-based identity management solution that provides privileged identity management and session recording.

Step 1: Access the appliance and documentation

If you download your product from Passport Advantage®, follow the instructions in the download document at http://www.ibm.com/support/docview.wss?uid=swg24038026.

This product includes the IBM Security Privileged Identity Manager Appliance firmware. An .iso image is provided to install the virtual appliance.

For the complete documentation, see the IBM Security Privileged Identity Manager product documentation at http://www.ibm.com/support/knowledgecenter/SSRQBP_2.0.0/com.ibm.ispim.doc_2.0/kc-homepage.html.

Step 2: Evaluate the hardware and system configuration

Supported hypervisors: VMware ESXi, versions 5.0 and 5.1

For detailed system requirements, see the IBM Security Privileged Identity Manager Product Overview Guide.

Step 3: Prepare the prerequisite software

Install and configure the database server and directory server. For steps on how to configure the prerequisite software components, see the IBM Security Privileged Identity Manager Installation and Configuration Guide.

Step 4: Gather network information and set up the virtual network

You can use either DHCP or a static IP address to manage the appliance. If you are using a static IP address, use this list to record important information to configure the network of the appliance:
  • Host name
  • Management IP address
  • Management Subnet Mask
  • Management Gateway
  • Management DNS Server

If your virtual machine is using DHCP, the appliance obtains a dynamically leased IP address from the local DHCP server when it is powered on. You can use DHCP discovery software to locate this IP address, or you can connect directly to the appliance console to manage the interface settings.

Set up the virtual network. You must configure the VMware network correctly before you attempt to install and run the virtual appliance.

Step 5: Install the appliance

Complete these steps to install the appliance firmware in a virtual machine environment:
  1. Create a new virtual machine.
  2. Configure the virtual machine to boot from the supplied .iso file.
  3. Start the virtual machine. The firmware installer starts running automatically.
  4. Select the language that you want to use from the list of available languages.
  5. The system prompts you to install the firmware. Enter yes to proceed.
  6. When the firmware installation is complete, the system prompts you to reboot. The virtual machine reboots to the appliance console Unconfigured login prompt.

For detailed steps, see the IBM Security Privileged Identity Manager Installation and Configuration Guide.

Step 6: Appliance Setup wizard

Use the Appliance Setup wizard to complete the initial configuration of the appliance.
  1. Log in as admin user. The default password is admin. To secure the appliance, change the password immediately when prompted by the wizard.
  2. Use the Appliance Setup wizard to complete the initial configuration of the IBM Security Privileged Identity Manager virtual appliance.
    • Read and accept the License Agreement.
    • Configure the host name, the management interface settings, and the DNS settings.
    • Configure the date and time settings.
    • Review and accept the basic configuration summary to complete the appliance setup.

Step 7: Configure the IBM Security Privileged Identity Manager virtual appliance

In a web browser, log on to the Initial Configuration wizard. Enter the host name or the IP address of the virtual appliance. For example: https://<pimva_host>
Collect the information that is associated with the tasks that you are about to do.
  1. Configuration mode.
  2. Session recording activation code.
  3. Application Identity Management activation code.
  4. Certificate configuration.
  5. Mail server configuration.
  6. Database server configuration.
  7. Directory server configuration.

When the configuration is complete, restart the IBM Security Privileged Identity Manager virtual appliance. For information about configuring the appliance, see the IBM Security Privileged Identity Manager Installation and Configuration Guide.

Step 8: Install AccessAgent

See the IBM Security Privileged Identity Manager Installation and Configuration Guide for more information.

Step 9: Complete the required administrator tasks

See "Personas and use cases" in the IBM Security Privileged Identity Manager Product Overview Guide.

More information

Product documentation: http://www.ibm.com/support/knowledgecenter/SSRQBP_2.0.0/com.ibm.ispim.doc_2.0/kc-homepage.html

Product support: http://www.ibm.com/support/entry/portal/overview/software/security_systems/ibm_security_privileged_identity_manager